This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/VM-fKezFR4SnE_FueP0yvublPPU.roa
File:                     VM-fKezFR4SnE_FueP0yvublPPU.roa (raw, json)
Hash identifier:          NLdH6ARZYMD17vttDtKMAsBhjz+U3ES+mnznmPgNe9g=
Subject key identifier:   54:CF:9F:29:EC:C5:47:84:A7:13:F1:6E:78:FD:32:BE:E6:E5:3C:F5
Certificate issuer:       /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial:       019B7DC9D1CE0D09D96F50C50F8544E3C703
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/VM-fKezFR4SnE_FueP0yvublPPU.roa
Signing time:             Fri 02 Jan 2026 08:18:56 +0000
ROA not before:           Fri 02 Jan 2026 08:18:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     196721
IP address blocks:        212.6.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c9:d1:ce:0d:09:d9:6f:50:c5:0f:85:44:e3:c7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
        Validity
            Not Before: Jan  2 08:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=54cf9f29ecc54784a713f16e78fd32bee6e53cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:15:ec:ae:a0:39:7b:89:c8:79:d4:34:de:aa:
                    02:c4:aa:ba:fe:f2:26:4e:2d:07:0d:9f:81:27:48:
                    2c:4d:f1:37:ad:df:e2:46:64:be:6a:11:13:19:53:
                    57:f7:a1:24:60:5f:45:ee:59:87:32:94:85:fb:63:
                    c1:2e:1e:42:a2:77:3a:3f:56:bb:30:5e:b6:9d:c5:
                    a9:48:0f:96:8f:04:f2:7e:de:14:03:68:60:1a:f9:
                    84:55:65:ca:15:f2:60:24:7d:d0:82:4a:20:74:45:
                    63:58:bd:1a:ba:7e:dd:00:cf:52:95:c8:97:58:0a:
                    da:60:2a:ec:c7:a4:d1:07:f4:1c:44:e0:6a:9d:5e:
                    86:57:0f:1e:9b:59:bf:33:27:44:38:c3:cd:7b:bd:
                    f9:ec:24:5d:9d:85:77:c4:5a:75:c7:bd:e6:15:74:
                    07:9c:da:19:aa:85:61:48:d9:95:c8:db:ad:4c:6e:
                    84:9d:94:a5:fa:94:18:29:03:ff:28:3f:31:1b:f3:
                    71:29:87:80:06:2a:dc:02:66:0a:32:03:43:22:e7:
                    22:9e:27:a7:8f:54:bb:73:3b:45:f3:df:e7:39:29:
                    28:d3:80:43:d1:bc:18:45:e4:cb:de:b8:08:3d:be:
                    87:f5:9c:37:d6:a1:a2:2f:57:c8:9d:6e:97:72:d0:
                    9c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CF:9F:29:EC:C5:47:84:A7:13:F1:6E:78:FD:32:BE:E6:E5:3C:F5
            X509v3 Authority Key Identifier:
                keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/VM-fKezFR4SnE_FueP0yvublPPU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.6.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:dc:f0:7b:9a:7c:85:b8:6f:6b:ee:22:b5:9a:22:f0:f1:46:
         75:c0:15:8b:36:78:27:8c:53:60:08:00:2f:8d:0b:f0:54:a6:
         1e:73:85:03:63:eb:3c:94:0b:82:87:78:5b:ab:2e:11:28:d2:
         47:b4:00:b0:e7:35:d3:a9:7a:44:7b:25:48:c7:55:3f:09:6d:
         b6:61:50:cb:eb:b3:46:bc:d6:4f:7d:34:fb:18:da:16:65:da:
         12:78:ce:36:3b:ba:f9:8a:13:2a:40:8d:6c:84:34:e9:d3:ec:
         87:47:36:e8:1f:ff:d0:e4:7a:3a:86:e6:84:e7:d4:89:06:67:
         00:b6:b4:d6:f2:2c:e7:ec:03:47:8d:69:3b:92:5d:4e:3a:39:
         e7:0e:e4:8d:16:88:f5:ab:32:08:f7:04:2a:1b:c7:79:17:9e:
         18:3c:41:27:14:35:8a:90:c9:a4:16:c0:2d:13:77:a2:fc:b5:
         71:9f:13:27:16:67:29:06:fa:73:18:16:97:7a:05:48:cc:4e:
         d8:39:20:42:3b:78:c3:3e:13:8c:8f:eb:84:11:b7:83:c7:23:
         93:c5:37:87:b0:ea:73:c3:a4:2e:7e:fc:6c:c4:86:b1:e6:7d:
         2c:82:e4:3a:18:e5:0e:f3:b6:9a:11:11:d8:ff:ab:86:b5:a6:
         f6:a7:b6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:47:27 2026 by rpki-client